Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e20343030383636.roa
File: 33312e362e36322e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: 4nDSQia/tdbDdzFtXJZvIUDLb2tH69YOMZKTzZdjMDk=
Subject key identifier: 06:1A:A0:39:E3:F0:77:BC:FF:6F:1B:33:CA:2D:ED:91:12:6B:2C:75
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 281679B5CF17B1851AE1B28ACABAEF526D2A3F63
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e20343030383636.roa
Signing time: Mon 20 May 2024 02:58:25 +0000
ROA not before: Mon 20 May 2024 02:53:25 +0000
ROA not after: Mon 19 May 2025 02:58:25 +0000
asID: 400866
IP address blocks: 31.6.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jun 2024 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:16:79:b5:cf:17:b1:85:1a:e1:b2:8a:ca:ba:ef:52:6d:2a:3f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: May 20 02:53:25 2024 GMT
Not After : May 19 02:58:25 2025 GMT
Subject: CN=061AA039E3F077BCFF6F1B33CA2DED91126B2C75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:27:1a:61:89:58:a6:2f:93:1c:f1:ed:1f:e1:
31:7c:da:5f:2e:8f:ec:b9:4d:19:7d:3c:ba:e6:b6:
75:b5:01:13:5c:f1:f6:27:76:0d:9b:03:76:6c:41:
34:bf:28:76:8f:ad:51:7d:9d:d3:7b:c6:b2:28:0c:
60:f7:b9:8e:83:a6:2b:22:b6:a5:55:d0:bf:4b:19:
af:f1:90:1f:87:c8:fd:9e:4f:b4:8d:4f:67:8a:5f:
8d:c8:aa:a6:f7:f4:98:85:0a:ad:a1:d5:f8:d6:a7:
d1:91:df:bf:16:26:9a:a1:2e:ff:50:94:da:34:7d:
e6:eb:a4:3b:ff:0f:75:d8:30:80:c5:8b:5b:00:b0:
ea:ca:45:14:e3:42:94:c6:8d:0f:75:01:e9:c2:68:
38:fa:b6:e4:1c:b6:69:13:a5:ba:1c:95:aa:02:90:
b4:32:f8:09:51:92:6c:2c:e9:ef:59:8d:0d:97:01:
9c:b4:5b:5e:55:35:d5:52:ea:6a:f7:ec:1b:f8:a6:
7a:3e:82:0a:b5:04:56:14:94:dc:86:06:8b:50:ef:
c2:1e:61:08:7c:e6:4b:7f:31:39:42:f7:23:0e:9a:
e1:d9:44:cd:00:c0:5f:c0:91:98:7a:9b:eb:7b:0b:
57:5b:31:2c:3d:37:62:70:31:76:ec:03:b3:ad:c7:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1A:A0:39:E3:F0:77:BC:FF:6F:1B:33:CA:2D:ED:91:12:6B:2C:75
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.62.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8d:48:4f:73:ce:25:15:34:9c:96:ac:bb:35:82:1a:ba:59:
25:15:bb:80:90:d5:7e:f7:45:2c:63:6f:21:e2:4b:b1:6c:cc:
4b:dd:bd:65:99:b7:07:43:89:f8:7b:fd:d6:da:45:4e:dc:0e:
10:54:ae:98:ee:9b:e5:eb:bb:8f:d7:4c:23:29:aa:b8:ab:2b:
82:09:2e:bc:de:fc:cc:56:5c:51:49:36:c8:02:61:92:57:e7:
7d:44:9d:b9:89:36:1a:12:4b:40:7d:27:6f:27:35:65:85:1c:
4b:cd:48:a6:2b:bf:3a:80:23:98:8b:5c:f8:30:62:c2:21:91:
75:11:65:07:63:c5:33:39:a5:c7:ef:4c:15:db:56:e0:18:aa:
fd:f1:08:16:8a:c0:ab:65:ea:37:70:85:73:10:0a:d2:6c:92:
62:b6:bb:4e:80:66:49:94:b0:3d:14:1a:5c:aa:8f:6f:61:61:
01:a6:a2:8b:1c:fa:8b:e3:32:af:84:b6:2d:77:e8:70:66:8b:
2b:05:26:75:02:6d:8d:a5:80:bc:5d:f0:cb:7f:4c:06:7c:f1:
57:5c:9a:94:14:eb:d7:73:1b:e4:89:ee:cf:4d:47:27:67:e4:
23:1c:7d:2f:fb:bf:d3:96:27:94:2b:87:aa:54:8f:79:28:2c:
f6:a4:56:c0
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUKBZ5tc8XsYUa4bKKyrrvUm0qP2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDA1MjAwMjUzMjVaFw0yNTA1MTkwMjU4MjVaMDMxMTAvBgNV
BAMTKDA2MUFBMDM5RTNGMDc3QkNGRjZGMUIzM0NBMkRFRDkxMTI2QjJDNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxJxphiVimL5Mc8e0f4TF82l8u
j+y5TRl9PLrmtnW1ARNc8fYndg2bA3ZsQTS/KHaPrVF9ndN7xrIoDGD3uY6Dpisi
tqVV0L9LGa/xkB+HyP2eT7SNT2eKX43Iqqb39JiFCq2h1fjWp9GR378WJpqhLv9Q
lNo0febrpDv/D3XYMIDFi1sAsOrKRRTjQpTGjQ91AenCaDj6tuQctmkTpboclaoC
kLQy+AlRkmws6e9ZjQ2XAZy0W15VNdVS6mr37Bv4pno+ggq1BFYUlNyGBotQ78Ie
YQh85kt/MTlC9yMOmuHZRM0AwF/AkZh6m+t7C1dbMSw9N2JwMXbsA7Otx2vZAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUBhqgOePwd7z/bxszyi3tkRJrLHUwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM2MzIyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzAzODM2MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBj4w
DQYJKoZIhvcNAQELBQADggEBAJCNSE9zziUVNJyWrLs1ghq6WSUVu4CQ1X73RSxj
byHiS7FszEvdvWWZtwdDifh7/dbaRU7cDhBUrpjum+Xru4/XTCMpqrirK4IJLrze
/MxWXFFJNsgCYZJX531EnbmJNhoSS0B9J28nNWWFHEvNSKYrvzqAI5iLXPgwYsIh
kXURZQdjxTM5pcfvTBXbVuAYqv3xCBaKwKtl6jdwhXMQCtJskmK2u06AZkmUsD0U
Glyqj29hYQGmoosc+ovjMq+Eti136HBmiysFJnUCbY2lgLxd8Mt/TAZ88VdcmpQU
69dzG+SJ7s9NRydn5CMcfS/7v9OWJ5Qrh6pUj3koLPakVsA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:05 2025 by rpki-client